Emerging Threats & Trends
BNPL Under Attack: Fraud and Security Risks in Buy Now, Pay Later
Buy Now, Pay Later shifts fraud risk in unfamiliar ways — synthetic identities, ATO, never-pay schemes. The risks for providers and merchants.
PCI DSS Compliance
PCI DSS for Small Businesses: A Realistic Path for Level 4 Merchants
Small merchants face PCI DSS too — but scope, not spending, decides the burden. A realistic compliance path without an enterprise budget.
Data Breaches & Incident Response
How Stolen Card Data Is Sold — and How Merchants Use Dark Web Monitoring
Stolen card data moves through carding shops and encrypted channels within days of a breach. How the market works and how monitoring…
Mobile & Digital Wallets
Passkeys and Payments: Can Phishing-Resistant Login Fix Checkout Authentication?
Passkeys replace passwords with device-bound cryptographic keys. How they work, where they fit in payment authentication, SCA, and their limits.
Best Practices & How-To
Managing Third-Party Payment Providers: A TPSP Risk Playbook for PCI DSS
Outsourcing payments doesn't outsource accountability. Build a TPSP program: due diligence, AOC reviews, responsibility matrices, monitoring.
EMV & Card-Present Security
How PINs Stay Secret: PIN Blocks, PIN Pads, and End-to-End PIN Security
Your PIN is encrypted the instant you type it. How PIN pads, PIN blocks, and key hierarchies keep PINs secret from merchant…
Regulations & Standards
DORA and Payments: What EU Operational Resilience Rules Mean for Payment Firms
The EU's Digital Operational Resilience Act applies to payment institutions and their ICT providers. Its five pillars, and how it overlaps PCI…
E-commerce & Online Payments
Securing Payment APIs and Webhooks: Authentication, Idempotency, and Replay Defense
Practical security for payment APIs and webhooks — key handling, webhook signature verification, idempotency keys, replay protection, and rate limits.
Fraud Prevention
Measuring Fraud Prevention: The KPIs That Show Whether Your Program Works
Fraud rate alone hides more than it reveals. The KPIs — false positive rate, approval rate, chargeback rate — that show real…
Emerging Threats & Trends
When AI Agents Go Shopping: Payment Security for Agentic Commerce
AI agents are starting to browse, choose, and pay on users' behalf. The new authentication, authorization, and fraud questions agentic commerce raises.